# CVEs published 2014-04-08

24 CVEs were published on April 8, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0315](https://cve.now/CVE-2014-0315.md): Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 (no CVSS)
- [CVE-2014-0507](https://cve.now/CVE-2014-0507.md): Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.20 (no CVSS)
- [CVE-2014-0508](https://cve.now/CVE-2014-0508.md): Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Ado (no CVSS)
- [CVE-2014-0509](https://cve.now/CVE-2014-0509.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows an (no CVSS)
- [CVE-2014-1751](https://cve.now/CVE-2014-1751.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1752](https://cve.now/CVE-2014-1752.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2014-1753](https://cve.now/CVE-2014-1753.md): Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2014-1755](https://cve.now/CVE-2014-1755.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1757](https://cve.now/CVE-2014-1757.md): Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a bi (no CVSS)
- [CVE-2014-1758](https://cve.now/CVE-2014-1758.md): Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Micros (no CVSS)
- [CVE-2014-1759](https://cve.now/CVE-2014-1759.md): pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (inc (no CVSS)
- [CVE-2014-1760](https://cve.now/CVE-2014-1760.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2541](https://cve.now/CVE-2014-2541.md): The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) (no CVSS)
- [CVE-2014-2542](https://cve.now/CVE-2014-2542.md): Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), (no CVSS)
- [CVE-2014-2543](https://cve.now/CVE-2014-2543.md): Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Rou (no CVSS)
- [CVE-2011-4958](https://cve.now/CVE-2011-4958.md): Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows (no CVSS)
- [CVE-2011-5277](https://cve.now/CVE-2011-5277.md): Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remo (no CVSS)
- [CVE-2011-5278](https://cve.now/CVE-2011-5278.md): SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers t (no CVSS)
- [CVE-2012-0033](https://cve.now/CVE-2012-0033.md): The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a de (no CVSS)
- [CVE-2012-1561](https://cve.now/CVE-2012-1561.md): Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal (no CVSS)
- [CVE-2012-6642](https://cve.now/CVE-2012-6642.md): Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type param (no CVSS)
- [CVE-2012-6643](https://cve.now/CVE-2012-6643.md): Multiple SQL injection vulnerabilities in the update\_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to (no CVSS)
- [CVE-2012-6644](https://cve.now/CVE-2012-6644.md): Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2012-6645](https://cve.now/CVE-2012-6645.md): Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.